Kirk McElhearn, writing for Intego:
Apple has offered two-factor authentication for some time (here’s how you set it up), but with the release of iOS 9 and OS X El Capitan, Apple is changing the way this works. Previously, you had to save a recovery key, a long string of characters that Apple suggested you print out and store in a safe place. This presented a number of problems, however, such as people not saving it, losing it, or not being in the location where it was stored when they needed to access it.
It’s a good idea to turn on two-factor authentication, especially now that the process is a bit simpler. If, however, you get locked out of your account, it can take several days for Apple to reinstate it. If this happens, go to iforgot.apple.com and follow the instructions. Apple will contact you and ask you a number of questions, so you can prove that you are, indeed, you, and have not been replaced by an alien or a cyborg.
Note that two-factor authentication is different than two-factor verification. From Apple’s web site:
Two-factor authentication is a new service built directly into iOS 9 and OS X El Capitan. It uses different methods to trust devices and deliver verification codes, and offers a more streamlined user experience. The current two-step verification feature will continue to work separately for users who are already enrolled.
And:
If you can’t sign in, reset your password, or receive verification codes, you can regain access to your account by requesting account recovery. Simply provide a verified phone number where you can receive a text message or phone call regarding your account. Apple will review your case and send an automated message to the number you provided when your Apple ID is ready for recovery. This message will direct you to iforgot.apple.com to complete the required steps and regain access to your account.
Account recovery will take a few days—or longer—depending on what account information you are able to provide. The process is designed to get you back into your account as quickly as possible while denying access to anyone who might be pretending to be you.
This last bit is a bit mysterious, but that doesn’t bother me. The key is that Apple recognizes that social engineering may be at work and has a protocol in place to at least make it possible to get your account back if you lose all your safety nets.
I’ve been having serious problems with getting things straightened out. I tell it to send me verification numbers, and they don’t arrive. I was transferring my phone from AT&T to T-Mobile, and it’s been a major PIA. The Apple Store couldn’t do it. So I ended up taking T-Mobile’s deal – way cheaper than Apple’s lease program. I got a 128gig iPhone S and am going to pay $27 a month for it, and I can pay it off in 18 months for $200.
So trouble lead to a better deal anyway. Now I have to go in an manually change my devices. Oh well, a bit of trouble for two-factor security is good I guess.
you don’t get AppleCare included.
Actually, because of the promotion, it does cost less with T-Mobile. Next phone, it would cost the same. But after 18 months I own the phone (and after the small balloon payment). With Apple’s plan, that takes two years, and if you replace it after one year, you turn in the old phone and have to wait two more years to own it.
But you’re right. It normally costs about the same over two years and you have a newer phone with Apple. I’ll probably go with Apple’s plan next time. Next time won’t require me porting from AT&T to T-Mobile, which is what pushed me over to T-Mobile.
I’m still not seeing the option to sign up for the new two factor security. You’re supposed to be able to do it on the iPhone/iPad but instead I’m directed to appleid.apple.com. It only offers me the old version. Anybody actually able to sign up for the new version?